Extracted

• • Target

    bcc18fdda7c1dca0e7e75320d350c73da8dc26c500af4a476321b9f98d51cb5cN.exe

  • Size

    288KB

  • MD5

    7488ba5a9b582717a6c4a60c477256f0

  • SHA1

    5dec2df890432393777e4f69e52f55787ef69a10

  • SHA256

    bcc18fdda7c1dca0e7e75320d350c73da8dc26c500af4a476321b9f98d51cb5c

  • SHA512

    d92fc9798ffe06ead826043d45741b7de5c659b83acb19e09b185a752148267a1453b690fc76c914350052c8268200c2f6efa5611e1840b3e51defd58b3b6ca1

  • SSDEEP

    3072:6ZUSsmBE7Jmw9z5TvLX4eS7LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7IQ:6ZU0BEdmw37DzyLl+wGXAF2PbgKLVN

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2